Navigation system with apparatus for detecting accuracy failures

ABSTRACT

A navigation system for a vehicle having a receiver operable to receive a plurality of signals from a plurality of transmitters includes a processor and a memory device. The memory device has stored thereon machine-readable instructions that, when executed by the processor, enable the processor to determine a set of error estimates corresponding to pseudo-range measurements derived from the plurality of signals, determine an error covariance matrix for a main navigation solution using ionospheric-delay data, and, using a solution separation technique, determine at least one protection level value based on the error covariance matrix.

CROSS REFERENCE TO RELATED APPLICATION

This application claims priority from U.S. Provisional Appl. No. 61/012,303 entitled “RAIM WITH SPECIALLY CORRELATED IONOSPHERIC ERRORS” filed Dec. 7, 2007, which is incorporated by reference as if fully set forth herein.

BACKGROUND OF THE INVENTION

Conventional RAIM algorithms may be based on either a weighted or un-weighted least squares solution where the errors in each satellite's pseudo-range measurement are uncorrelated with the errors in the other satellites' pseudo-range measurements.

However, the ionospheric error (which can be the dominant error source) in each satellite's pseudo-range is, in fact, highly correlated with that of each of the other satellites. By ignoring this correlation, the computed Horizontal Protection Limit (HPL) which bounds the horizontal position error is much larger than necessary. As a result the availability of GPS to do a low Required Navigation Performance (RNP) approach suffers.

SUMMARY OF THE INVENTION

In an embodiment of the invention, a navigation system for a vehicle having a receiver operable to receive a plurality of signals from a plurality of transmitters includes a processor and a memory device. The memory device has stored thereon machine-readable instructions that, when executed by the processor, enable the processor to determine a set of error estimates corresponding to pseudo-range measurements derived from the plurality of signals, determine an error covariance matrix for a main navigation solution using ionospheric-delay data, and, using a solution separation technique, determine at least one protection level value based on the error covariance matrix.

BRIEF DESCRIPTION OF THE DRAWINGS

Preferred and alternative embodiments of the present invention are described in detail below with reference to the following drawings.

FIG. 1 shows a navigation system incorporating embodiments of the present invention;

FIG. 2 shows a graphical illustration of HPL determination according to an embodiment of the present invention; and

FIG. 3 shows a process according to an embodiment of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

FIG. 1 shows a radio navigation system incorporating the teachings of an embodiment of the present invention. The system includes several transmitters 1-N and user set 12. Transmitters 1-N, in the preferred embodiment, are a subset of the NAVSTAR GPS constellation of satellite transmitters, with each transmitter visible from the antenna of user set 12. Transmitters 1-N broadcast N respective signals indicating respective transmitter positions and signal transmission times to user set 12.

User set 12, mounted to an aircraft (not shown), includes receiver 14, processor 16, and a memory device, such as processor memory 18. Receiver 14, preferably NAVSTAR GPS compatible, receives the signals, extracts the position and time data, and provides pseudorange measurements to processor 16. From the pseudorange measurements, processor 16 derives a position solution for the user set 12. Although the satellites transmit their positions in World Geodetic System of 1984 (WGS-84) coordinates, a Cartesian earth-centered earth-fixed system, the preferred embodiment determines the position solution in a local reference frame L, which is level with the north-east coordinate plane and tangential to the Earth. This frame choice, however, is not critical, since it is well-understood how to transform coordinates from one frame to another.

Processor 16 also uses the pseudorange measurements to detect satellite transmitter failures and to determine a worst-case error, or protection limit, both of which it outputs with the position solution to flight management system 20. Flight management system 20 compares the protection limit to an alarm limit corresponding to a particular aircraft flight phase. For example, during a pre-landing flight phase, such as nonprecision approach, the alarm limit (or allowable radial error) is 0.3 nautical miles, but during a less-demanding oceanic flight phase, the alarm limit is 2-10 nautical miles. (For more details on these limits, see RTCA publication DO-208, which is incorporated herein by reference.) If the protection limit exceeds the alarm limit, the flight management system, or its equivalent, announces or signals an integrity failure to a navigational display in the cockpit of the aircraft. The processor also signals whether it has detected any satellite transmitter failures.

An embodiment of the invention models the correlation of the ionospheric errors between each pair of satellites as a function of the distance between their ionospheric pierce points. The closer the pierce points, the higher the correlation. The root-mean-square (RMS) uncertainty (or sigma) of each satellite's pseudo-range measurement is computed using the ionospheric variance model defined in DO-229D, Appendix J. Using the computed correlation coefficients and the sigma for each satellite, the ionospheric measurement error covariance matrix is formed. The remaining errors (satellite clock and ephemeris, tropospheric, multi-path and receiver noise) are assumed to be uncorrelated. Thus, the combined measurement error covariance matrix for these error sources is diagonal. These two matrices are added to form the total measurement error covariance matrix. This matrix is then inverted to form the weighting matrix for the least squares solution. Fault detection and exclusion can then be performed and the various protection levels such as the horizontal protection level (HPL), vertical protection level (VPL), horizontal exclusion level (HEL), and vertical exclusion level (VEL) computed based on the methods of solution separation previously described in U.S. Pat. Nos. 5,760,737 and 6,639,549, each of which are incorporated by reference as if fully set forth herein.

FIG. 3 illustrates a process 300, according to an embodiment of the invention, that can be implemented in the radio navigation system illustrated in FIG. 1. The process 300 is illustrated as a set of operations or steps shown as discrete blocks. The process 300 may be implemented in any suitable hardware, software, firmware, or combination thereof. As such the process 300 may be implemented in computer-executable instructions that can be transferred from one electronic device to a second electronic device via a communications medium. The order in which the operations are described is not to be necessarily construed as a limitation.

Referring to FIG. 3, at a step 310, the processor 16 computes the sigma (error) values on pseudo-range and measurements.

At a step 320, the processor 16 determines the measurement matrix. The true vector of pseudo-range residuals Δρ is related to the incremental position/time solution vector Δx (distance from the position linearization point) as follows: Δρ=ρ−{circumflex over (ρ)}=HΔx  (1)

where H is the measurement matrix and is given by:

$\mspace{85mu}{H = {{\begin{bmatrix} {- {LOS}_{1x}} & {- {LOS}_{1y}} & {- {LOS}_{1z}} & 1 \\ {- {LOS}_{2x}} & {- {LOS}_{2y}} & {- {LOS}_{2z}} & 1 \\ \vdots & \vdots & \vdots & \vdots \\ {- {LOS}_{Nx}} & {- {LOS}_{Ny}} & {- {LOS}_{Nz}} & 1 \end{bmatrix}\begin{bmatrix} {LOS}_{ix} \\ {LOS}_{iy} \\ {LOS}_{iz} \end{bmatrix}} = \mspace{14mu}{{Line}\text{-}{of}\text{-}{sight}\mspace{20mu}{unit}\mspace{14mu}{vector}\mspace{14mu}{pointing}\mspace{14mu}{from}\mspace{14mu}{the}\mspace{14mu}{user}{\mspace{11mu}\;}{to}\mspace{14mu}{satellite}\mspace{14mu} i}}}$      Δ x = x − x̂ = true  position/clock  bias-linerarization  point

At a step 330, the processor 16 computes the Error Covariance Matrix. The vector of measured pseudo-range residuals Δ{tilde over (ρ)} is the true pseudo-range residual vector plus the vector of residual errors δρ and is thus:

$\begin{matrix} \begin{matrix} {{\Delta\;\overset{\sim}{p}} = {p + {\delta\; p} - \hat{p}}} \\ {= {\overset{\sim}{p} - \hat{p}}} \\ {= {{H\;\Delta\; x} + {\delta p}}} \end{matrix} & (2) \end{matrix}$

The processor 16 designates the post-update estimate of Δx as Δ{circumflex over (x)}. Then, the processor 16 can define the vector of post-update measurement residuals as: ξ=Δ{tilde over (ρ)}−HΔ{circumflex over (x)}  (3)

Each post-update measurement residual is the difference between the measured pseudo-range residual and the predicted pseudo-range residual based on the post-update estimate Δ{circumflex over (x)}.

A “weighted least-squares solution” can be determined by the processor 16 by finding the value of Δ{circumflex over (x)} which minimizes the weighted sum of squared residuals. Thus, the processor 16 may minimize: ξ^(T) Wξ=(Δ{tilde over (ρ)}−HΔ{circumflex over (x)})^(T) W(Δ{tilde over (ρ)}−HΔ{circumflex over (x)})  (4)

where W is an appropriate weighting matrix. The weighting matrix generally chosen is one which normalizes the residuals based on the uncertainty of each pseudo-range measurement. Thus, the processor 16 yields:

$\begin{matrix} {{{W = \begin{bmatrix} \frac{1}{\sigma_{1}^{2}} & 0 & \ldots & 0 \\ 0 & \frac{1}{\sigma_{2}^{2}} & \ldots & 0 \\ \vdots & \vdots & \ddots & \vdots \\ 0 & 0 & \ldots & \frac{1}{\sigma_{N}^{2}} \end{bmatrix}},\begin{matrix} {{assuming}\mspace{14mu}{uncorrelated}} \\ {measurements} \end{matrix}}\mspace{14mu}} & (5) \end{matrix}$

which represents the inverse of the pseudo-range measurement error covariance matrix assuming each pseudo-range error is uncorrelated with the others.

However, the vertical ionospheric delay component of each pseudo-range error is highly correlated with the others. If this correlation is known, then the processor 16 can take advantage of that knowledge by using the true pseudo-range measurement error covariance matrix R. The weighting matrix then becomes

$\begin{matrix} {W = {R^{- 1} = \begin{bmatrix} \sigma_{1}^{2} & {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{2}} \right\rbrack} & \ldots & {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{N}} \right\rbrack} \\ {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{2}} \right\rbrack} & \sigma_{2}^{2} & \ldots & {E\left\lbrack {{\delta\rho}_{2}{\delta\rho}_{N}} \right\rbrack} \\ \vdots & \vdots & \ddots & \vdots \\ {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{N}} \right\rbrack} & {E\left\lbrack {{\delta\rho}_{2}{\delta\rho}_{N}} \right\rbrack} & \ldots & \sigma_{N}^{2} \end{bmatrix}^{- 1}}} & (6) \end{matrix}$

The value of Δ{circumflex over (x)} that minimizes (4) is determined by taking the derivative, setting it equal to zero, and solving for Δ{circumflex over (x)}. This yields:

$\begin{matrix} {\left. \begin{matrix} {{\Delta\;\hat{x}} = \left( {H^{T}{WH}} \right.} \\ {= {S\;\Delta\;\overset{\sim}{p}}} \end{matrix} \right)^{- 1}H^{T}W\;\Delta\;\overset{\sim}{p}} & (7) \end{matrix}$

where the processor 16 has defined the weighted least-squares solution matrix S as: S=(H ^(T) WH)⁻¹ H ^(T) W  (8)

Altitude Aiding

Barometric altitude can be used by the processor 16 to augment the GPS pseudo-range measurements. If it is used, the measurement matrix is then augmented as follows

$\begin{matrix} {H = \begin{bmatrix} {- {LOS}_{1x}} & {- {LOS}_{1y}} & {- {LOS}_{1z}} & 1 \\ {- {LOS}_{2x}} & {- {LOS}_{2y}} & {- {LOS}_{2z}} & 1 \\ \vdots & \vdots & \vdots & \vdots \\ {- {LOS}_{Nx}} & {- {LOS}_{Ny}} & {- {LOS}_{Nz}} & 1 \\ 0 & 0 & {- 1} & 0 \end{bmatrix}} & (9) \end{matrix}$

This measurement matrix assumes that the incremental position vector (the first 3 elements) within Δx are given in local-level coordinates (with the z axis down). The line-of-sight (LOS) elements then must also be expressed in the local-level coordinates. The weighting matrix is also augmented as follows

$\begin{matrix} \begin{matrix} {W = R^{- 1}} \\ {= \begin{bmatrix} \sigma_{1}^{2} & {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{2}} \right\rbrack} & \ldots & {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{N}} \right\rbrack} & 0 \\ {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{2}} \right\rbrack} & \sigma_{2}^{2} & \ldots & {E\left\lbrack {{\delta\rho}_{2}{\delta\rho}_{N}} \right\rbrack} & 0 \\ \vdots & \vdots & \ddots & \vdots & \vdots \\ {E\left\lbrack {{\delta\rho}_{1}{\delta\rho}_{N}} \right\rbrack} & {E\left\lbrack {{\delta\rho}_{2}{\delta\rho}_{N}} \right\rbrack} & \ldots & \sigma_{N}^{2} & 0 \\ 0 & 0 & \ldots & 0 & \sigma_{baro}^{2} \end{bmatrix}^{- 1}} \end{matrix} & (10) \end{matrix}$

Computing the Measurement Covariance Matrix

There are multiple methods that can be employed to determine the measurement error covariance matrix. In the case of a Kalman filter application, the temporal behavior (time-correlation) of the ionospheric delays may be modeled. The spatially correlated ionospheric error for satellite i can be modeled as a weighted sum of three independent normalized (sigma=1.0) Gaussian random errors scaled by the nominal iono sigma value for that satellite as follows: δρ_(iono) _(—) _(i)=σ_(iono) _(—) _(i)k_(iono) _(—) _(i) ^(T)x_(ref)  (11)

where x_(ref) is a 3×1 vector of independent Gaussian random errors with zero mean and a variance of 1. The weighting vector k_(iono) _(—) _(i) ^(T) is determined by the processor 16 by first defining three grid points on the thin shell model of the ionosphere (at a height of 350 km) equally spaced in azimuth at a great circle distance of 1500 km from the user. The processor 16 may then define a 3×1 vector x_(grid) of normalized delays at these points. The delays at gridpoints i and j may be spatially correlated with each other based on the great circle distances between them according to: E[x _(grid) _(—) _(i) x _(grid) _(—) _(j) ^(T)]=1−(1−e⁻ ^(grid) _(—) ^(i,grid) _(—) ^(j) ^(/d) ^(iono) )²  (12) where d_(grid) _(—) _(i,grid) _(—) _(j)=great circle distance between grid point i and grid point j d_(iono)=correlation distance of the ionospheric delay=4000 km  (13)

Using that relationship the processor 16 can form a 3×3 covariance matrix P_(grid) which describes the correlations between each of the grid points: P_(grid)=E[x_(grid)x_(grid) ^(T)]

If the delay processes that exist at these grid points are a certain linear combination of the reference independent Gaussian random errors, then they will have the desired spatial and temporal correlation. The processor 16 may assume that the desired linear combination is obtained by using a 3×3 upper-triangular mapping matrix U_(grid) as follows: x_(grid)=U_(grid)x_(ref)  (14)

The grid covariance matrix is then:

$\begin{matrix} \begin{matrix} {P_{grid} = {{E\left\lbrack {x_{grid}x_{grid}^{T}} \right\rbrack} = {U_{grid}{E\left\lbrack {x_{ref}x_{ref}^{T}} \right\rbrack}U_{grid}^{T}}}} \\ {= {U_{grid}U_{grid}^{T}}} \end{matrix} & (15) \end{matrix}$

Therefore, the mapping matrix U_(grid) can be formed by the processor 16 simply by factoring the covariance matrix P_(grid). Since the geometry of the three gridpoints is fixed, the covariance matrix P_(grid) is constant and can thus be pre-computed by the processor 16. Now the processor 16 can choose a linear combination of the three grid-point delays that yields a normalized delay at the pierce-point of the satellite i such that the proper spatial correlation with the three grid points (and thus, presumably, each of the other satellites) is achieved as follows: δρ_(norm) _(—) _(iono) _(—) _(i)=k_(sat) _(—) _(i) _(—) _(grid)x_(grid)  (16)

where

k_(sat) _(—) _(i) _(—) _(grid)=3-vector of weighting factors

δρ_(norm) _(—) _(iono) _(—) _(i)=normalized delay at the satellite pierce-point

The satellite pseudo-range delay may be correlated to the delay at the k^(th) grid point according to:

$\begin{matrix} {{E\left\lbrack {{\delta\rho}_{{norm\_ iono}{\_ i}}x_{grid\_ k}^{T}} \right\rbrack} = {1 - \left( {1 - {\mathbb{e}}^{- d_{{sat\_ i}{\_ grid}{\_ k}^{/d_{iono}}}}} \right)^{2}}} & (17) \end{matrix}$ where d_(sat) _(—) _(i,grid) _(—) _(k)=great circle distance between the satellite pierce point and the grid point d_(iono)=correlation distance of the nominal ionospheric delay  (18)

The 1×3 covariance matrix P_(sat) _(—) _(i) _(—) _(grid), which defines the correlations between satellite i and each of the grid points, is

$\begin{matrix} \begin{matrix} {P_{{sat\_ i}{\_ grid}} = {{E\left\lbrack {{\delta\rho}_{norm\_ i}x_{grid}^{T}} \right\rbrack} = {E\left\lbrack {k_{{sat\_ i}{\_ grid}}^{T}x_{grid}x_{grid}^{T}} \right\rbrack}}} \\ {= {k_{{sat\_ i}{\_ grid}}^{T}P_{grid}}} \end{matrix} & (19) \end{matrix}$

Therefore the weighting vector k_(sat) _(—) _(grid) can be found by the processor 16 as follows: k _(sat) _(—) _(i) _(—) _(grid) ^(T) =P _(sat) _(—) _(i) _(—) _(grid) P _(grid) ⁻¹  (20)

Combining (14) and (16), the processor 16 can obtain the normalized vertical delays directly from the three independent reference delays as follows:

$\begin{matrix} \begin{matrix} {{\delta\;\rho_{{norm\_ iono}{\_ i}}} = {k_{{sat\_ i}{\_ grid}}^{T}U_{grid}x_{ref}}} \\ {= {k_{iono\_ i}^{T}x_{ref}}} \end{matrix} & (21) \end{matrix}$

Thus, the weighting vector is: k _(iono) _(—) _(i) ^(T)=k_(sat) _(—) _(i) _(—) _(grid) ^(T)U_(grid)  (22)

The processor 16 can form a vector of N normalized pseudo-range iono delays from (21) as follows:

$\begin{matrix} \begin{matrix} {{\delta\rho}_{{norm\_ ion}o} = {\begin{bmatrix} k_{{sat\_}\; 1\;{\_ grid}}^{T} \\ k_{{sat\_}2{\_ grid}}^{T} \\ \vdots \\ k_{{sat\_ N}{\_ grid}}^{T} \end{bmatrix}U_{grid}x_{ref}}} \\ {= {K_{sat\_ grid}U_{grid}x_{ref}}} \end{matrix} & (23) \end{matrix}$

The actual (non-normalized) delay along the line of sight can be obtained by the processor 16 by scaling the normalized delay by the sigma value for that satellite based on the geomagnetic latitude of the pierce-point and obliquity factor as defined in DO-229. In vector form, the processor 16 yields:

$\begin{matrix} \begin{matrix} {{\delta\rho}_{iono} = {\begin{bmatrix} \sigma_{{iono\_}1} & 0 & \ldots & 0 \\ 0 & \sigma_{{iono\_}2} & \ddots & \vdots \\ \vdots & \ddots & \ddots & 0 \\ 0 & \ldots & 0 & \sigma_{iono\_ N} \end{bmatrix}{\delta\rho}_{norm\_ iono}}} \\ {= {\begin{bmatrix} \sigma_{{iono\_}1} & 0 & \ldots & 0 \\ 0 & \sigma_{{iono\_}2} & \ddots & \vdots \\ \vdots & \ddots & \ddots & 0 \\ 0 & \ldots & 0 & \sigma_{iono\_ N} \end{bmatrix}K_{sat\_ grid}U_{grid}x_{ref}}} \\ {= {\Gamma\; K_{sat\_ grid}U_{grid}x_{ref}}} \end{matrix} & (24) \end{matrix}$

The ionospheric delay error covariance matrix may be defined as:

$\begin{matrix} \begin{matrix} {R_{iono} = {E\left\lbrack {{\delta\rho}_{iono}{\delta\rho}_{iono}^{T}} \right\rbrack}} \\ {= {{\Gamma K}_{sat\_ grid}U_{grid}{E\left\lbrack {x_{ref}x_{ref}^{T}} \right\rbrack}U_{grid}^{T}K_{sat\_ grid}^{T}\Gamma^{T}}} \\ {= {{\Gamma K}_{sat\_ grid}P_{grid}K_{sat\_ grid}^{T}\Gamma^{T}}} \\ {R_{iono} = \begin{bmatrix} \sigma_{{{iono}\_}1}^{2} & {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{{{iono}\_}2}} \right\rbrack} & \ldots & {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{iono\_ N}} \right\rbrack} \\ {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{{{iono}\_}2}} \right\rbrack} & \sigma_{{{iono}\_}2}^{2} & \ldots & {E\left\lbrack {{\delta\rho}_{{{iono}\_}2}{\delta\rho}_{iono\_ N}} \right\rbrack} \\ \vdots & \vdots & \ddots & \vdots \\ {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{iono\_ N}} \right\rbrack} & {E\left\lbrack {{\delta\rho}_{{{iono}\_}2}{\delta\rho}_{iono\_ N}} \right\rbrack} & \ldots & \sigma_{iono\_ N}^{2} \end{bmatrix}} \end{matrix} & (25) \end{matrix}$

The rest of the pseudo-range measurement errors are assumed to be uncorrelated with a composite one-sigma value denoted by σ_(other) _(—) _(i) for satellite i. For simplicity, the processor 16 can assume that the one-sigma value for each satellite is a constant six meters. The total measurement error covariance matrix is then:

$\begin{matrix} {R = {W^{- 1} = {R_{iono} + \begin{bmatrix} \sigma_{{{other}\_}1}^{2} & 0 & \ldots & 0 \\ 0 & \sigma_{{{other}\_}2}^{2} & \ddots & \vdots \\ \vdots & \ddots & \ddots & 0 \\ 0 & \ldots & 0 & \sigma_{other\_ N}^{2} \end{bmatrix}}}} & (26) \end{matrix}$

In a snapshot RAIM approach, the correlations between satellites are computed directly without the use of a grid. Computing the correlations between satellites directly may be both simpler and slightly more accurate.

Specifically, ionospheric error covariance may be modeled as a function of the great circle distance between the pierce points along the ionospheric shell (350 km above the earth's surface): E[ρ _(iono) _(—) _(i)δρ_(iono) _(—) _(j)]=σ_(iono) _(—) _(i)τ_(iono) _(—) _(j)[1−(1−e ^(−d) ^(ij) ^(/d) ^(iono) )²]

where:

d_(ij)=great circle distance between pierce points for sats i and j

d_(iono)=de-correlation distance=4000 km

Ionospheric errors are highly correlated. As such: W=R ⁻¹=(R _(iono) +R _(other))⁻¹

where:

$\begin{matrix} {R_{iono} = \begin{bmatrix} \sigma_{{{iono}\_}1}^{2} & {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{{{iono}\_}2}} \right\rbrack} & \ldots & {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{iono\_ N}} \right\rbrack} \\ {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{{{iono}\_}2}} \right\rbrack} & \sigma_{{{iono}\_}2}^{2} & \ldots & {E\left\lbrack {{\delta\rho}_{{{iono}\_}2}{\delta\rho}_{iono\_ N}} \right\rbrack} \\ \vdots & \vdots & \ddots & \vdots \\ {E\left\lbrack {{\delta\rho}_{{{iono}\_}1}{\delta\rho}_{iono\_ N}} \right\rbrack} & {E\left\lbrack {{\delta\rho}_{{{iono}\_}2}{\delta\rho}_{iono\_ N}} \right\rbrack} & \ldots & \sigma_{iono\_ N}^{2} \end{bmatrix}} \\ {R_{other} = \begin{bmatrix} {`\sigma}_{{{other}\_}1}^{2} & 0 & \ldots & 0 \\ 0 & \sigma_{{{other}\_}2}^{2} & \ldots & 0 \\ \vdots & \vdots & \ddots & \vdots \\ 0 & 0 & \ldots & \sigma_{other\_ N}^{2} \end{bmatrix}} \end{matrix}$

Error Covariance for the Weighted Least Squares Solution

At a step 340, the processor 16 computes a weighted least-squares solution. The error in the post-updated solution is:

$\begin{matrix} \begin{matrix} {{\delta\hat{x}} = {{\Delta\;\hat{x}} - {\Delta\; x}}} \\ {= {{\left( {H^{T}{WH}} \right)^{- 1}H^{T}W\;\Delta\overset{\sim}{\rho}} - {\Delta\; x}}} \end{matrix} & (27) \end{matrix}$

Substituting (2) into (27) yields:

$\begin{matrix} \begin{matrix} {{\delta\hat{\; x}} = {{\left( {H^{T}{WH}} \right)^{- 1}H^{T}{W\left( {{H\;\Delta\; x} + {\delta\rho}} \right)}} - {\Delta\; x}}} \\ {= {{\Delta\; x} - {\left( {H^{T}{WH}} \right)^{- 1}H^{T}W\;{\delta\rho}} - {\Delta\; x}}} \\ {= {\left( {H^{T}{WH}} \right)^{- 1}H^{T}W\;{\delta\rho}}} \\ {= {S\;{\delta\rho}}} \end{matrix} & (28) \end{matrix}$

Thus, the solution matrix S maps the pseudo-range errors into the post-updated solution error vector. The solution error covariance matrix may be defined as:

$\begin{matrix} \begin{matrix} {P = {{E\left\lbrack {\delta\;\hat{x}\;\delta\;{\hat{x}}^{T}} \right\rbrack} = {{{SE}\left\lbrack {\delta\rho\delta\rho}^{T} \right\rbrack}S^{T}}}} \\ {= {{SW}^{- 1}S^{T}}} \\ {= {\left( {H^{T}{WH}} \right)^{- 1}H^{T}{WW}^{- 1}{{WH}\left( {H^{T}{WH}} \right)}^{- 1}}} \\ {= \left( {H^{T}{WH}} \right)^{- 1}} \end{matrix} & (29) \end{matrix}$

The x and y horizontal position errors are statistically described by the upper 2×2 portion of P. The major and minor axes of the horizontal position error ellipse are equal to the square roots of the maximum and minimum eigenvalues of this 2×2 matrix and represent the one-sigma errors in the corresponding directions. Thus, the one-sigma error in the worst-case direction is given by:

$\begin{matrix} \begin{matrix} {\sigma_{horz\_ max} = \sqrt{\lambda_{\max}^{P{({{1:2},{1:2}})}}}} \\ {= \sqrt{\frac{p_{11} + p_{22}}{2} + \sqrt{\left( \frac{p_{11} - p_{22}}{2} \right)^{2} + \left( p_{12} \right)^{2}}}} \end{matrix} & (30) \end{matrix}$

The one-sigma error in the vertical position is given by: σ_(vert)=√{square root over (p ₃₃)}  (31)

Horizontal Figure of Merit is a conservative 95% fault-free error bound and may be computed by the processor 16 as the 2D RMS error from the error covariance matrix HFOM=2√{square root over (P(1,1)+P(2,2))}{square root over (P(1,1)+P(2,2))}

Similarly, the Vertical Figure of Merit may be computed by the processor 16 as the 2-sigma vertical error from the error covariance matrix VFOM=2√{square root over (P(3,3))}

Snapshot Solution Separation RAIM

At a step 350, the processor 16 computes at least one protection level value. In doing so, the processor 16 can employ a snapshot solution separation algorithm. Snapshot solution separation RAIM is analogous to a hybrid Kalman filter solution separation FDE. A main snapshot least-squares solution may be computed by the processor 16 using all N satellites in view (plus barometric altitude, if desired). In addition, N sub-solutions may be computed using each combination of N−1 satellites (plus altitude, if desired). Satellite failure detection occurs when the separation between the main position solution and one of the sub-solutions exceeds a threshold based on the expected statistical separation. Likewise, N−1 sub-sub-solutions may be computed by the processor 16 for each sub-solution using each combination of N−2 satellites which excludes the satellite excluded from the parent sub-solution plus one other. (Again altitude may also be used as an additional measurement). Isolation and exclusion of the failed satellite is accomplished by the processor 16 by comparing the separation of each sub-solution from each of its sub-sub-solutions against a threshold based on the expected statistical separation. In order to meet the time-to-detect requirement of eight seconds, fault detection may be performed and the RAIM HPL may be calculated by the processor 16 at least every four seconds.

As long as there are at least five satellites being tracked, the n^(th) sub-solution can be computed by the processor 16 by zeroing out the n^(th) row of the measurement matrix. If the processor 16 designates the measurement matrix of the sub-solution as H_(0n), then the resulting least-squares sub-solution is:

$\begin{matrix} \begin{matrix} {{\Delta\;{\hat{x}}_{0n}} = {\left( {H_{0n}^{T}W_{0n}H_{0n}} \right)^{- 1}H_{0n}^{T}W_{0n}\Delta\overset{\sim}{\rho}}} \\ {= {S_{0n}\Delta\;\overset{\sim}{\rho}}} \end{matrix} & (32) \end{matrix}$

where

H_(0n)=geometly matrix with n^(th) row zeroed

R_(0n)=covariance matrix R with n^(th) row and column deleted

W_(0n)=R_(0n) ⁻¹ with n^(th) zero row and column inserted

and where the weighted least-squares sub-solution matrix S_(0n) is: S _(0n)=(H _(0n) ^(T) WH _(0n))⁻¹ H _(0n) ^(T) W  (33)

Note that the n^(th) column of S_(0n) will contain all zeros. If the processor 16 designates the main solution with the subscript 00, then the separation between the main solution and sub-solution 0n is:

$\begin{matrix} \begin{matrix} {{dx}_{0n} = {{\Delta\;{\hat{x}}_{00}} - {\Delta\;{\hat{x}}_{0n}}}} \\ {= {{S_{00}\Delta\overset{\sim}{\rho}} - {S_{0n}\Delta\overset{\sim}{\rho}}}} \\ {= {\left( {S_{00} - S_{0n}} \right)\Delta\;\overset{\sim}{\rho}}} \\ {= {{dS}_{0n}\Delta\overset{\sim}{\rho}}} \end{matrix} & (34) \end{matrix}$

Where dS_(0n) is referred to as the separation solution matrix.

RAIM Fault Detection

In order to detect a satellite failure, the horizontal position solution separation (i.e., the discriminator) between each sub-solution and the main solution may be compared by the processor 16 to a detection threshold. The discriminator for sub-solution 0j is given by: d _(0n) =|d{circumflex over (x)} _(0n)(1:2)|=√{square root over ([d{circumflex over (x)} _(0n)(1)]² +[d{circumflex over (x)} _(0n)(2)]²)}  (35)

The detection threshold is set by the processor 16 to a multiple of the one-sigma separation in the worst case direction in order to give a false detection rate of 10⁻⁵/hr. Using (34) the processor 16 can express the solution separation in terms of the normalized pseudo-range errors as follows:

$\begin{matrix} \begin{matrix} {{dx}_{0n} = {{\Delta\;{\hat{x}}_{00}} - {\Delta\;{\hat{x}}_{0n}}}} \\ {= {\left( {{\Delta\; x} + {\delta\;{\hat{x}}_{00}}} \right) - \left( {{\Delta\; x} + {\delta\;{\hat{x}}_{0n}}} \right)}} \\ {= {{\delta\; x_{00}} - {\delta\; x_{0n}}}} \\ {= {{S_{00}{\delta\rho}} - {S_{0n}{\delta\rho}}}} \\ {= {\left( {S_{00} - S_{0n}} \right){\delta\rho}}} \\ {= {{dS}_{0n}{\delta\rho}}} \end{matrix} & (36) \end{matrix}$

The covariance of this solution separation is:

$\begin{matrix} \begin{matrix} {{dP}_{0n} = {E\left\lbrack {{dx}_{0n} \cdot {dx}_{0n}^{T}} \right\rbrack}} \\ {= {{dS}_{0n}{E\left\lbrack {\delta\rho\delta\rho}^{T} \right\rbrack}{dS}_{0n}^{T}}} \\ {= {{dS}_{0n}{RdS}_{0n}^{T}}} \\ {= {\left( {S_{00} - S_{0n}} \right){R\left( {S_{00} - S_{0n}} \right)}^{T}}} \\ {= {E\left\lbrack {\left( {{{\overset{\_}{S}}_{00}\delta{\overset{\_}{\rho}}_{00}} - {{\overset{\_}{S}}_{0n}\delta{\overset{\_}{\rho}}_{0n}}} \right)\left( {{{\overset{\_}{S}}_{00}\delta{\overset{\_}{\rho}}_{00}} - {{\overset{\_}{S}}_{0n}\delta{\overset{\_}{\rho}}_{0n}}} \right)^{T}} \right\rbrack}} \\ {= {{S_{00}{RS}_{00}^{T}} + {S_{0n}{RS}_{0n}^{T}} - {S_{00}{RS}_{0n}^{T}} - {S_{0n}{RS}_{00}^{T}}}} \end{matrix} & (37) \end{matrix}$

Note that:

$\begin{matrix} {\begin{matrix} {{S_{00}{RS}_{00}^{T}} = {\left\lbrack {\left( {H_{00}^{T}{WH}_{00}} \right)^{- 1}H_{00}^{T}W} \right\rbrack{W^{- 1}\left\lbrack {{WH}_{00}\left( {H_{00}^{T}{WH}_{00}} \right)}^{- 1} \right\rbrack}}} \\ {\left( {H_{00}^{T}{WH}_{00}} \right)^{- 1}\left( {H_{00}^{T}{WH}_{00}} \right)\left( {H_{00}^{T}{WH}_{00}} \right)^{- 1}} \\ {= \left( {H_{00}^{T}{WH}_{00}} \right)^{- 1}} \end{matrix}{and}} & (38) \\ \begin{matrix} {{S_{00}{RS}_{0n}^{T}} = {\left\lbrack {\left( {H_{00}^{T}W_{00}H_{00}} \right)^{- 1}H_{00}^{T}W_{00}} \right\rbrack{W_{00}^{- 1}\left\lbrack {W_{0n}{H_{0n}\left( {H_{0n}^{T}W_{0n}H_{0n}} \right)}^{- 1}} \right\rbrack}}} \\ {= {\left( {H_{00}^{T}W_{00}H_{00}} \right)^{- 1}H_{00}^{T}W_{0n}{H_{0n}\left( {H_{0n}^{T}W_{0n}H_{0n}} \right)}^{- 1}}} \end{matrix} & (39) \end{matrix}$

But, it can be shown that H₀₀ ^(T)W_(0n)H_(0n)=H_(0n) ^(T)W_(0n)H_(0n)  (40)

Substituting into (39) yields:

$\begin{matrix} \begin{matrix} {{S_{00}{RS}_{0n}^{T}} = {\left( {H_{00}^{T}W_{00}H_{00}} \right)^{- 1}H_{0n}^{T}W_{0n}{H_{0n}\left( {H_{0n}^{T}W_{0n}H_{0n}} \right)}^{- 1}}} \\ {= \left( {H_{00}^{T}W_{00}H_{00}} \right)^{- 1}} \\ {= {S_{00}{RS}_{00}^{T}}} \end{matrix} & (41) \end{matrix}$

Taking the transpose of each side, the processor 16 gets: S_(0n)RS₀₀ ^(T)=S₀₀RS₀₀ ^(T)  (42)

Substituting (41) and (42) into (37), the processor 16 gets:

$\begin{matrix} \begin{matrix} {{dP}_{0n} = {{S_{0n}{RS}_{0n}^{T}} - {S_{00}{RS}_{00}^{T}}}} \\ {= {\left( {H_{0n}^{T}W_{0n}H_{0n}} \right)^{- 1} - \left( {H_{00}^{T}W_{00}H_{00}} \right)^{- 1}}} \\ {= {P_{0n} - P_{00}}} \end{matrix} & (43) \end{matrix}$

The x and y horizontal separations are statistically described by the upper 2×2 portion of dP. The major and minor axes of the horizontal position separation ellipse are equal to the square roots of the maximum and minimum eigenvalues of this 2×2 matrix and represent the one-sigma separations in the corresponding directions. Thus, the one-sigma separation in the worst-case direction is given by:

$\begin{matrix} \begin{matrix} {\sigma_{d_{0n}} = \sqrt{\lambda_{\max}^{{dP}_{0n}{({{1:2},{1:2}})}}}} \\ {= \sqrt{\frac{{dp}_{11} + {dp}_{22}}{2} + \sqrt{\left( \frac{{dp}_{11} - {dp}_{22}}{2} \right)^{2} + \left( {dp}_{12} \right)^{2}}}} \end{matrix} & (44) \end{matrix}$

The processor 16 can assume that the separation is dominant along this worst case direction and thus the distribution can be considered Gaussian.

The detection threshold is computed by the processor 16 using the allowed false alarm probability and a Normal distribution assumption as follows:

$\begin{matrix} {D_{0n} = {{\sigma_{d_{0n}}{Q^{- 1}\left( \frac{p_{fa}}{2N} \right)}} = {\sigma_{d_{0n}} \cdot {K_{fa}(N)}}}} & (45) \end{matrix}$

where:

p_(fa)=probability of false alert per independent sample

N=Number of sub-solutions (i.e., number of satellites being tracked)

and Q⁻¹ is the inverse of:

$\begin{matrix} {{Q(z)} = {{\frac{1}{\sqrt{2\;\pi}}{\int_{z}^{\infty}{{\mathbb{e}}^{{- u^{2}}/2}\ {\mathbb{d}u}}}} = {{1 - {\frac{1}{\sqrt{2\;\pi}}{\int_{- \infty}^{z}{{\mathbb{e}}^{{- u^{2}}/2}{\mathbb{d}u}}}}} = {1 - {F(z)}}}}} & (46) \end{matrix}$

The function F(z) is the well known standard normal distribution function.

Horizontal failure detection may be declared by the processor 16 when a discriminator exceeds its threshold, according to the following:

For each active sub-solution 0n

If |d_(0n)|>D_(on), then

DETECTION=TRUE

End If

End For

RAIM HPL

The RAIM horizontal protection level (HPL) is the largest horizontal position error in the least-squares position solution that can occur and that meets the required probability of missed detection of 0.001. For a given sub-solution 0n, this occurs when the separation between the sub-solution and the main solution is just under the detection threshold and the sub-solution position error, which may be called a_(0n), is at its 99.9% performance bound. Thus, the HPL for sub-solution 0n is: a _(0n)=σ_(δr) _(0n) Q ⁻¹(p _(md))=σ_(δr) _(0n) k _(md)  (47)

where Q⁻¹ is as defined in (46) and: σ_(δr) _(0n) =√{square root over (λ^(P) ^(0n) ^((1:2,1:2)))}  (48)

and λ^(P) ^(0n) ^((1:2,1:2)) is the maximum eigenvalue of the 2×2 horizontal position elements of the sub-solution covariance matrix P_(0n) computed by the processor 16 from the normalized geometry matrix H _(0n) as follows: P _(0n)=(H _(0n) ^(T) WH _(0n))⁻¹  (49)

Note that the processor 16 may only consider one side of the distribution, since the failure biases the distribution to one side. Evaluating the K_(md) for 99.9% Gaussian bound the processor 16 gets: K_(md)=3.1  (50)

The HPL for each active sub-solution 0n, is then computed by the processor 16 as: HPL_(RAIM)(n)=D _(0n) +a _(0n)  (51)

The overall HPL and the hardest-to-detect satellite ID (needed for fault insertion test purposes) are computed by the processor 16 as follows: HPL_(RAIM)=0

For each active sub-solution 0n HPL_(RAIM)=max(HPL_(RAIM),HPL_(RAIM)(n))  (52) If HPL_(RAIM)=HPL_(RAIM)(n), then i _(SVID) _(—) _(hard) _(—) _(det) _(—) _(horz) f _(ix)(n)  (53) End If End for

where f_(ix)(n) is an array that maps the sub-solution number n to the satellite ID. A graphical illustration of HPL determination is provided in FIG. 2.

RAIM HUL

The Horizontal Uncertainty Level (HUL) is an estimate of horizontal position that bounds the true horizontal position error with a probability greater than or equal to 0.999. A conservative 0.999 bound on the horizontal position error of the primary solution can be computed by the processor 16 by simply adding the sub-solution horizontal position 0.999 error bound a_(0n) to the horizontal separation between the primary solution and the sub-solution. This will bound the error even in the case of a failure on the satellite excluded by that sub-solution. To bound the error for any satellite failure, the processor 16 may compute the HUL for all sub-solutions and take the worst case.

The HUL is thus computed by the processor 16 as follows: HUL_(RAIM)=max(d _(0n) +a _(0n)),n=1,N  (54)

where a_(0n) is as defined in (47).

The HUL can be substituted for the HPL when a failure is detected. In this way, the failure continues to be bounded until the faulty satellite is isolated and excluded.

Vertical Position Error Detection

For protection of vertical position, the discriminator is: d _(0n) ^(vert) =|dx _(0n)(3)|

For vertical error detection, the sigma of the vertical position error is computed by the processor 16 from the third diagonal of the covariance: σ_(d) _(0n) ^(vert)=√{square root over (dP _(0n)(3,3))}

The threshold set to meet allowed false detection probability is:

$D_{d_{0n}}^{vert} = {{\sigma_{d_{0n}}^{vert}{Q^{- 1}\left( \frac{p_{fa}}{2\; N} \right)}} = {\sigma_{d_{0n}}^{vert} \cdot {K_{fd}(N)}}}$

Vertical Protection Level (VPL)

The error bound of the sub-solution vertical position may be determined by the processor 16 from the sub-solution error covariance matrix: σ_(δr) _(0n) ^(vert)=√{square root over (P _(0n)(3,3))} a _(0n) ^(vert)=σ_(δr) _(0n) ^(vert) Q ⁻¹(p _(md))=σ_(δr) _(0n) ^(vert) K _(md)

VPL may be computed by the processor 16 by adding this bound to the threshold for each sub-solution and taking the worst case: VPL=max(D _(0n) ^(vert) +a _(0n) ^(vert))

RAIM Fault Isolation and Exclusion

Fault isolation for RAIM may be performed by the processor 16 by performing fault detection on the separations between each sub-solution and its corresponding sub-sub-solutions.

Sub-sub-solution nm which excludes satellites n and m is:

$\begin{matrix} {{\Delta\;{\hat{x}}_{n\; m}} = {\left( {H_{nm}^{T}W_{n\; m}H_{nm}} \right)^{- 1}H_{nm}^{T}W_{nm}\Delta\;\overset{\sim}{\rho}}} \\ {= {S_{nm}\Delta\;\overset{\sim}{\rho}}} \end{matrix}$ where:

-   -   H_(nm)=geometry matrix with n^(th) and m^(th) row zeroed     -   R_(nm)=R with n^(th) and m^(th) rows and columns deleted     -   W_(nm)=R_(0n) ⁻¹ with n^(th) and m^(th) zero row and column         inserted

Solution separation between sub and sub-sub-solution is:

$\begin{matrix} {{dx}_{nm} = {{{\Delta\;{\hat{x}}_{0n}} - {\Delta{\hat{x}}_{nm}}} = {{S_{0n}\Delta\overset{\sim}{\rho}} - {S_{nm}\Delta\overset{\sim}{\rho}}}}} \\ {= {\left( {S_{0n} - S_{nm}} \right)\Delta\;\overset{\sim}{\rho}}} \\ {= {{dS}_{nm}\Delta\overset{\sim}{\rho}}} \end{matrix}$

The horizontal position solution separation vector for each active sub-solutions 0n and each of its corresponding active sub-sub-solutions (nm for m>n or mn for n>m) may be calculated by the processor 16 as: dx _(nm)(i)=Δx _(0n)(i)×Δx _(nm)(i); i=1, 2; m>n  (55) dx _(nm)(i)=Δx _(0n)(i)−Δx _(mn)(i); i=1, 2; n>m  (56)

The horizontal discriminator (the horizontal solution separation distance) for each active sub-solution may be calculated by the processor 16 using the x and y position separation states: d _(nm)=√{square root over ([dx _(nm)(1)]² +[dx _(nm)(2)]²)}{square root over ([dx _(nm)(1)]² +[dx _(nm)(2)]²)}  (57)

As for detection, the threshold is based on the separation covariance matrix. For each active sub-solution 0n and each of its corresponding active sub-sub-solutions (nm for m>n or mn for n>m), the separation covariance matrix is computed by the processor 16 as: dP _(nm) =P _(nm) −P _(0n) ; m>n  (58) dP _(nm) =P _(mn) −P _(0n) ; n>m  (59)

Again, the horizontal position error is an elliptical distribution in the x-y plane. The error along any one axis is normally distributed. For the purpose of setting a threshold to meet the required false alarm rate and to calculate the protection level, the processor 16 makes the worst case assumption that the error is entirely along the semi-major axis of this ellipse. The variance in this worst case direction is given by the maximum eigenvalue λ^(dP) ^(max) ^((1:2,1:2)) of the 2×2 matrix formed from the horizontal position elements of the separation covaniance. Thus, the horizontal position separation uncertainty in the worst case direction for each sub-solution is computed by the processor 16 as follows: σ_(d) _(nm) =√{square root over (λ_(max) ^(dP) ^(nm) ^((1:2,1:2)))}  (60)

Each threshold is computed by the processor 16 as follows:

$\begin{matrix} {D_{nm} = {{\sigma_{d_{nm}}{Q^{- 1}\left( \frac{p_{fa}}{2\left( {N - 1} \right)} \right)}} = {\sigma_{d_{nm}} \cdot {K_{fa}\left( {N - 1} \right)}}}} & (61) \end{matrix}$

where p_(fa), N, Q⁻¹, and K_(fa) are as previously defined for detection.

Exclusion proceeds in an analogous manner to detection with the sub-solution taking the role of the main solution and the sub-sub-solution taking the role of the sub-solution. For each sub-solution, the separation from each of its sub-sub-solutions is determined by the processor 16 and tested against its threshold.

The exclusion logic is as follows:

If sub-solution n is separated from at least one of its sub-sub-solutions by more than its threshold, then satellite n cannot be the failed satellite (i.e. the failed satellite is still included in sub-solution n). On the other hand, if the separation of sub-solution r from each of its sub-sub-solutions is less than the exclusion threshold, then satellite r is the failed satellite (providing each of the other sub-solutions is separated from at least one of its sub-sub-solutions by more than its threshold).

This is equivalent to saying that satellite r is isolated as the failed satellite if and only if: d_(rm)<D_(rm); for all m≠r and d_(nm)≧D_(nm); for at least one m≠n for all n≠r

Exclusion of a vertical position failure may be accomplished by the processor 16 in a similar manner.

The following algorithm executed by the processor 16 will accomplish the isolation as described above:

If (DETECTION_HORZ)  ISOLATION_HORZ = FALSE  PREVIOUS_ISOLATION_HORZ = FALSE  For each active sub-solution 0n   If |d_(nm) ^(horz)| < D_(nm) ^(horz) for all m (active sub-sub-solutions only), then    If (PREVIOUS_ISOLATION_HORZ), then     ISOLATION_HORZ = FALSE    Else     ISOLATION_HORZ = TRUE     PREVIOUS_ISOLATION_HORZ = TRUE     k_(failed) _(—) _(svid) = f_(ix) (n)    End if   End if  End for End if If (ISOLATION_HORZ), then  SAT_STATUS = ISOLATION End if

When the failure is isolated, the satellite is marked by the processor 16 as failed, all the solutions excluding satellite are dropped, and the satellite will be retried in one hour.

RAIM HEL

RAIM HEL is computed by the processor 16 in a fashion analogous to that of the Kalman filter solution separation. At exclusion, the horizontal position solution of sub-solution 0n is separated by the processor 16 from sub-sub-solution nm by D_(nm) (see equation (61)). The sub-solution position error with respect to the true position is thus D_(nm) plus the sub-sub-solution position error (assuming, in the worst case, that they are in opposite directions). The sub-solution position error bound a_(nm) can be determined by the processor 16 from the maximum eigenvalue λ^(P) ^(nm) ^((1:2,1:2)) of the 2×2 matrix formed from the horizontal position error elements of the sub-sub-solution error covariance matrix. That is: a _(nm)=σ_(Υr) _(nm) Q ⁻¹(p _(md))=σ_(δr) _(nm) K _(md)  (62)

where Q⁻¹ is as previously defined and σ_(δr) _(nm) =√{square root over (λ^(P) ^(nm) ^((1:2,1:2)))}  (63)

Again, the processor 16 may only consider one side of the distribution, since the failure biases the distribution to one side. The allowed probability of missed detection is 1.0^(e-3) and is assumed by the processor 16 to be the same as the allowable probability of failed exclusion. The sigma multiplier K_(md) is as previously defined for the RAIM HPL calculation. The RAIM HEL for each active sub-sub-solution nm of sub-solution 0n is then computed by the processor 16 as: HEL_(RAIM)(nm)=D _(nm) +a _(nm)  (64)

Note that the HEL does not consider the failure-free rare normal condition, since exclusion assumes that a failure is present. The overall HEL and the hardest-to-exclude satellite ID (needed for fault insertion test purposes) may be computed by the processor 16 as follows: HEL_(RAIM)(nm)=0

For each active sub-solution 0n

For each active sub-sub-solution nm of sub-solution 0n HEL_(RAIM)=max(HEL_(RAIM),HEL_(RAIM)(nm))  (65)

If HEL_(RAIM)=HEL_(RAIM)(nm), then i _(SVID) _(—) _(hard) _(—) _(excl) _(—) _(horz) =f _(ix)(n)  (66)

End If

End for

End for

As such: HEL=max(max(D _(nm) +a _(nm))), n=1, . . . N, m=1, . . . N Similarly: VEL=max(max(D _(nm) ^(vert) +a _(nm) ^(vert))), n=1, . . . N, m=1, . . . N

Ionospheric Error Model Calculations

Determination of Ionospheric Grid Points and Pierce Point Coordinates

For a Kalman filter approach, and in order to utilize (17), the processor 16 may first determine the coordinates of each gridpoint and the coordinates of the satellite's ionospheric pierce point. Then, using those two sets of coordinates, the great circle distance between the pierce point and the grid point can be calculated by the processor 16. For either a Kalman filter or snapshot RAIM approach, knowing the coordinates of a point i (e.g., the system illustrated in FIG. 1, or “user”) and the distance and azimuth from point i to a point j (e.g. the gridpoint), the coordinates of point j can be determined by the processor 16 as follows:

$\begin{matrix} {\lambda_{j} = {\tan^{- 1}\left( \frac{{\sin\;\lambda_{i}\cos\;\psi_{ij}} + {\cos\;\lambda_{i}\sin\;\psi_{ij}\cos\; A_{ij}}}{\sqrt{\left( {{\cos\;\lambda_{i}\cos\;\psi_{ij}} - {\sin\;\lambda_{i}\sin\;\psi_{ij}\cos\; A_{ij}}} \right)^{2} + {\sin^{2}\psi_{ij}\sin^{2}A_{ij}}}} \right)}} & \left( {A{.1}} \right) \\ {\Lambda_{j} = {\Lambda_{i} + {\tan^{- 1}\left( \frac{\sin\;\psi_{ij}\sin\; A_{ij}}{{\cos\;\lambda_{i}\cos\;\psi_{ij}} - {\sin\;\lambda_{i}\sin\;\psi_{ij}\cos\; A_{ij}}} \right)}}} & \left( {A{.2}} \right) \\ \begin{matrix} {\lambda_{i} = {{Geodetic}\mspace{14mu}{latitude}\mspace{14mu}{of}\mspace{14mu}{point}\mspace{14mu} i}} \\ {\lambda_{j} = {{Geodetic}\mspace{14mu}{latitude}\mspace{14mu}{of}\mspace{14mu}{point}\mspace{14mu} j}} \\ {\Lambda_{i} = {{Geodetic}\mspace{14mu}{longitude}\mspace{14mu}{of}\mspace{14mu}{point}\mspace{14mu} i}} \\ {\Lambda_{j} = {{Geodetic}\mspace{14mu}{longitude}\mspace{14mu}{of}\mspace{14mu}{point}\mspace{14mu} j}} \\ {{A_{ij} = {{Azimuth}\mspace{14mu}{angle}\mspace{14mu}({bearing})\mspace{14mu}{from}\mspace{14mu}{point}\mspace{14mu} i\mspace{14mu}{to}\mspace{14mu}{point}\mspace{14mu} j}}\mspace{14mu}} \\ {{\psi_{ij} = {{Angular}\mspace{14mu}{distance}\mspace{14mu}\left( {{{earth}'}s\mspace{14mu}{central}\mspace{14mu}{angle}} \right)}}\mspace{25mu}} \\ {{from}\mspace{14mu}{point}\mspace{14mu} i\mspace{14mu}{to}\mspace{14mu}{point}\mspace{14mu} j} \\ {= \frac{d_{ij}}{R_{e} + h_{l}}} \\ {d_{ij} = {{Great}\mspace{14mu}{circle}\mspace{14mu}{distance}\mspace{14mu}{from}\mspace{14mu}{point}\mspace{14mu} i\mspace{14mu}{to}\mspace{14mu}{point}\mspace{14mu} j}} \\ {R_{e} = {{{Radius}\mspace{14mu}{of}\mspace{14mu}{the}\mspace{14mu}{earth}} = {6378\mspace{14mu}{km}}}} \\ {h_{l} = {{{Height}\mspace{14mu}{of}\mspace{14mu}{the}\mspace{14mu}{ionosphere}\mspace{14mu}{thin}\mspace{14mu}{shell}\mspace{14mu}{model}} = {350\mspace{14mu}{km}}}} \end{matrix} & \; \end{matrix}$

The coordinates of the ionospheric pierce point of the satellite can also be calculated using (A.1) and (A.2). In this case, ψ_(ij) represents the central angle from the user location to the pierce point and may be calculated by the processor 16 as follows:

$\begin{matrix} {\psi_{ij} = {\frac{\pi}{2} - E - {\sin^{- 1}\left( {\frac{R_{e}}{R_{e} + h_{l}}\cos\; E} \right)}}} & \left( {A{.3}} \right) \end{matrix}$

where E is the elevation angle of the satellite from the user location with respect to the local tangent plane.

Computing Elevation and Azimuth Angles of Satellite

The elevation angle E of a satellite is defined as the angle the line-of-sight vector makes with the user's local tangent (horizontal) plane. The azimuth angle A of the satellite is the angle of the line-of-sight vector with respect to true north as measured in the horizontal plane. Thus, we have the following

$\begin{matrix} {E = {{ATAN}\; 2\left( {{- u_{LOS\_ z}},\sqrt{u_{LOS\_ x}^{2} + u_{LOS\_ y}^{2}}} \right)}} & \left( {A{.4}} \right) \\ {A_{0} = {{{ATAN}\; 2\left( {u_{LOS\_ y},u_{LOS\_ x}} \right)} + \alpha}} & \left( {A{.5}} \right) \\ {A = \left\{ \begin{matrix} {A_{0},} & {{- \pi} \leq A_{0} < \pi} \\ {{A_{0} - {2\;\pi}},} & {A_{0} \geq \pi} \\ {{A_{0} + {2\;\pi}},} & {A_{0} < \pi} \end{matrix} \right.} & \left( {A{.6}} \right) \end{matrix}$

where

u_(LOS) _(—) _(x), u_(LOS) _(—) _(y), u_(LOS) _(—) _(z)=x, y, and z components of the line-of-sight vector u_(LOS) ^(L)

α=wander angle (angle in azimuth from north to the x local-level frame axis)

Note that the azimuth angle is adjusted by ±2π so that the result is between −π and +π.

Determination of Great Circle Distance

The great circle distance along the ionospheric thin shell model from a point i (e.g. satellite pierce point) to another point j (e.g. grid point) may be calculated by the processor 16 as follows:

$\begin{matrix} {d_{ij} = {\left( {R_{e} + h_{I}} \right){\tan^{- 1}\left( \frac{\sqrt{{\cos^{2}\lambda_{j}\sin^{2}\Delta\;\Lambda_{ij}} + \left( {{\cos\;\lambda_{i}\sin\;\lambda_{j}} - {\sin\;\lambda_{i}\cos\;\lambda_{j}\cos\;\Delta\;\Lambda_{ij}}} \right)^{2}}}{{\cos\;\lambda_{i}\cos\;\lambda_{j}\cos\;{\Delta\Lambda}_{ij}} + {\sin\;\lambda_{i}\sin\;\lambda_{j}}} \right)}}} & \left( {A{.7}} \right) \end{matrix}$

where ΔΛ_(ij)=Λ_(j)−Λ_(i,)

Ionospheric Variance Model

The algorithm that may be executed by the processor 16 for calculation of the ionospheric model error variance may be from ICD-GPS-200C and DO-229D J.2.3. Note that the symbols in this section are unique to this section.

Using the satellite's elevation angle E, form the earth's central angle between the user position and the earth projections of ionospheric pierce point ψ_(pp) using equation (A.3).

Next, using the satellite's elevation angle E, the azimuth angle A, the earth's central angle ψ_(pp) and the user geodetic latitude λ_(u) and longitude Λ_(u) determine the pierce point geodetic latitude φ_(pp) and longitude λ_(pp) using equations (A.1) and (A.2).

Form the absolute value of the geomagnetic latitude of the ionospheric pierce point. |λ_(m)∥=λ_(pp)+0.064π cos(Λ_(pp)−1.617π)|radians  (A.8)

Form an estimate of the vertical delay error based on geomagnetic latitude

$\begin{matrix} {\tau_{vert} = \left\{ \begin{matrix} {{9\mspace{14mu}{meters}},} & {{\lambda_{m}} \leq {20\mspace{14mu}{degrees}}} \\ {{4.5\mspace{14mu}{meters}},} & {{22.5{^\circ}} < {\lambda_{m}} \leq {55{^\circ}}} \\ {{6\mspace{14mu}{meters}},} & {{\lambda_{m}} > {55{^\circ}}} \end{matrix} \right.} & \left( {A{.9}} \right) \end{matrix}$

Using the elevation angle E, calculate the square of the obliquity factor.

$\begin{matrix} {F_{pp}^{2} = \frac{1}{1 - \left( \frac{R_{e}{\cos(E)}}{R_{e} + h_{l}} \right)^{2}}} & \left( {A{.10}} \right) \end{matrix}$

Form the modeled estimated variance of the ionospheric delay. σ_(model) ²=F_(pp) ²τ_(vert) ²  (A.11)

Form the estimated variance using the compensation that is applied if available from the receiver. (If not, assume zero).

$\begin{matrix} {\sigma_{comp}^{2} = \left( \frac{{CT}_{IONO}}{5} \right)^{2}} & \left( {A{.12}} \right) \end{matrix}$

Form the estimated variance of the ionospheric delay. τ_(iono) ²=max(τ_(model) ²,τ_(comp) ²)  (A.13)

While the preferred embodiment of the invention has been illustrated and described, as noted above, many changes can be made without departing from the spirit and scope of the invention. Accordingly, the scope of the invention is not limited by the disclosure of the preferred embodiment. Instead, the invention should be determined entirely by reference to the claims that follow. 

1. A navigation system for a vehicle having a receiver operable to receive a plurality of signals from a plurality of transmitters, the navigation system comprising: a processor; and a memory device having stored thereon machine-readable instructions that, when executed by the processor, enable the processor to: determine a set of error estimates corresponding to pseudo-range measurements derived from the plurality of signals, determine an error covariance matrix for a main navigation solution based on the determined set of error estimates, the error covariance matrix including off-diagonal elements representing ionospheric-delay spatial correlation, and using a solution separation technique, determine at least one protection level value based on the error covariance matrix.
 2. The system of claim 1 wherein determining the error covariance matrix includes determining a spatially correlated ionospheric error associated with each of the transmitters.
 3. The system of claim 2 wherein determining the error covariance matrix includes defining a plurality of grid points on a thin shell model of the ionosphere.
 4. The system of claim 3 wherein the defined grid points are equally spaced in azimuth at a great circle distance from the system.
 5. The system of claim 4 wherein the great circle distance is 1500 km.
 6. The system of claim 3 wherein determining the error covariance matrix includes defining a vector of normalized ionospheric delays at the grid points.
 7. The system of claim 1 wherein the at least one protection level value comprises a horizontal protection level value.
 8. The system of claim 1 wherein the at least one protection level value comprises a vertical protection level value.
 9. The system of claim 1 wherein the at least one protection level value comprises a horizontal exclusion level value.
 10. A non-transitory computer-readable medium having computer-executable instructions for performing steps comprising: determining a set of error estimates corresponding to pseudo-range measurements derived from the plurality of signals; determining an error covariance matrix for a main navigation solution using ionospheric-delay data, wherein the error covariance matrix includes off-diagonal elements representing the spatially correlated ionospheric error for the plurality of signals; using a solution separation technique, determining at least one protection level value based on the error covariance matrix; and displaying the at least one protection level value.
 11. The medium of claim 10 wherein determining the error covariance matrix includes determining a spatially correlated ionospheric error associated with each of the transmitters.
 12. The medium of claim 11 wherein determining the error covariance matrix includes defining a plurality of grid points on a thin shell model of the ionosphere.
 13. The medium of claim 12 wherein the defined grid points are equally spaced in azimuth at a great circle distance from the system.
 14. The medium of claim 13 wherein the great circle distance is 1500 kin.
 15. The medium of claim 12 wherein determining the error covariance matrix includes defining a vector of normalized ionospheric delays at the grid points.
 16. The medium of claim 10 wherein the at least one protection level value comprises a horizontal protection level value.
 17. The medium of claim 10 wherein the at least one protection level value comprises a vertical protection level value.
 18. The medium of claim 10 wherein the at least one protection level value comprises a horizontal exclusion level value.
 19. A method, comprising the steps of: accessing from a first computer the computer-executable instructions of claim 10; and providing the instructions to a second computer over a communications medium. 